Privacy Policy

Version 2026-09-24 · [Company Name] · [Website URL]

These terms are not yet complete: the merchant legal details below are still missing. Paid checkout stays disabled until they are provided. (companyName, registeredAddress, incorporation, websiteUrl, emails.billing, emails.refunds, emails.cancel, emails.legal, emails.security)

1. Who we are

This policy explains how [Company Name] ("we") collects and uses personal data when you use our manga translation service. We are the controller of account and billing data. For the pages you upload we act on your instructions. Privacy questions and requests: [legal@ email].

2. Data we collect

Account data: name, email address, password hash, email-verification status and, if you use Google or Discord sign-in, that account ID, name and email.
Workspace data: team members, roles and invitations.
Content: the images, PDFs and archives you upload, project settings, glossary terms, text layers you edit, translated pages and exports.
Billing data: purchases, credit balance and ledger, refunds and invoices. Card details are entered on Stripe and never reach our servers.
Technical data: IP address, browser user agent, request IDs, security and audit logs, and product usage events. For the referral program we also keep keyed hashes of your network address, a device-id cookie and a browser fingerprint, used only to stop self-invites from the same network or browser and deleted 180 days after last use.

3. How we use data

To provide the Service: store your files, run translation and cleanup tasks, and deliver exports (performance of contract).
To take payments, keep accounting records and handle refunds and disputes (contract and legal obligation).
To send verification, password-reset, invitation and service emails (contract).
To secure the Service, prevent abuse and fraud, and enforce rate and credit limits (legitimate interest).

We do not sell personal data, show third-party advertising, or use your uploads or outputs to train AI models.

4. Service providers

We share data only with providers that help us run the Service, under contracts that limit their use of it:

Cloudflare: application hosting (Workers), private file storage (R2), transactional email and network protection.
Our managed PostgreSQL server: account, project and billing records, with daily encrypted backups kept for 14 days.
API Mart (apimart.ai): receives the pages you choose to translate and your task settings, and returns the generated page. Their own retention rules also apply.
Stripe: payment processing, invoices and refunds.
Google: sign-in, only if you choose "Continue with Google".
Discord: sign-in, only if you choose "Continue with Discord". We request only your account ID, name and verified email.
Cloudflare Web Analytics (if enabled): cookieless, aggregated visit counts on public pages only; no cookies, no cross-site tracking, not loaded on signed-in screens.

These providers may process data outside your country, including in the United States. Where required we rely on standard contractual clauses or equivalent safeguards.

5. Free browser tools

The free CBZ/PDF tools run entirely in your browser; files you open there are not uploaded unless you explicitly start a cloud translation.

6. Retention

Uploads that never start a paid task, and sample translations: deleted after 24 hours.
Files of paid projects: deleted 30 days after processing by default; the actual expiry is shown in each project.
Export downloads: 7 days.
Deleting a project revokes file access immediately and removes task text and editor drafts.
Account data: 90 days after you close your account, then deleted or anonymised. Purchase, refund and audit records are kept for as long as tax and accounting law requires.
Usage events: 180 days. Sent email records: 30 days.

7. Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing.

Export: Settings → Export my account data.
Delete: Settings → Delete account (cancel any subscription and wait for pending refunds first).
Anything else: email [legal@ email]. We reply within 30 days. You may also complain to your local data-protection authority.

8. Cookies and local storage

We use a strictly necessary session cookie to keep you signed in, and browser local storage for your interface language, active workspace and unsent upload drafts. We do not use advertising or cross-site tracking cookies. Details: Cookie Policy.

9. Security

Files are stored in private buckets and served only to authorised workspace members; connections use TLS; passwords are hashed. Report vulnerabilities to [security@ email].

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

11. Changes

We will email you at least 14 days before material changes take effect.